OOF-AII-571155
Google's Face Grouping Allegedly Collected and Analyzed Users' Facial Structure without Consent, Violated BIPA
A class-action lawsuit alleged Google failing to provide notice, obtain informed written consent, or publish data retention policies about the collection, storage, and analysis of its face-grouping feature in Google Photos, which violated Illinois Biometric Information Privacy Act (BIPA).
- Event date
- 2015-05-01
- Country
- United States of America
- Severity
- Moderate
- Evidence state
- Single-source
Assessment status
Generated from available public incident evidence using OOF® governance methodology. It is not an official investigation, legal determination, regulatory finding, certification, or OOF® Approved Assessment.
View source record from AI Incident Database (Responsible AI Collaborative)
Assessment confidence dimensions
- Source corroboration
- Single-source
- Extraction completeness
- High
- Methodological assignment confidence
- Moderate
Measures source-group corroboration only; it does not establish factual truth.
Measures populated source fields after deterministic normalization; it does not measure correctness.
Measures automated assignment support; substantive correctness requires authorized human review.
Known facts from the incident record
- The incident record identifies the event date as 2015-05-01.
- The incident record identifies the location as United States of America.
Reported claims
- A class-action lawsuit alleged Google failing to provide notice, obtain informed written consent, or publish data retention policies about the collection, storage, and analysis of its face-grouping feature in Google Photos, which violated Illinois Biometric Information Privacy Act (BIPA).
Material unknowns
- Independent corroboration is not established in the available incident record.
Primary governance problem
The incident appears to expose a governance problem involving information, communication, structure. Available reporting supports preliminary methodological interpretation, not a finding of fault or non-compliance.
Architecture intelligence
PGA™ — Prediction Governance Architecture
Primary architecture
The reported information, communication, structure concern falls within the governed questions represented by PGA™ — Prediction Governance Architecture.
Governance focus: When changing information or conditions materially affect a prediction, when must it be preserved, reviewed, revised, superseded, or withdrawn?
Canonical methodology (ParentStandard):
VFM® — Value Flow Mechanisms Architecture
Contributing architecture
The reported recognition, classification concern falls within the governed questions represented by VFM® — Value Flow Mechanisms Architecture.
Governance focus: How should recognition, classification be governed in the conditions described by the available incident evidence?
Deeper methodology is withheld because the available evidence does not justify a Parent Standard or Core Module.
Preliminary governance questions
- When changing information or conditions materially affect a prediction, when must it be preserved, reviewed, revised, superseded, or withdrawn?
- How should recognition, classification be governed in the conditions described by the available incident evidence?
- What operational authority and controls applied to Google at the relevant time?
- What evidence would establish how Google Photos Face Grouping, Facial Recognition Systems, Faceprint Generation Systems, Biometric Data Processing Systems produced or enabled the reported outcome?
- What additional independent evidence is required to resolve the material evidence gaps?
Evidence gaps and limitations
- Only one independent source group is represented; corroboration is not established.
- AI technology is not specified in the source record.